Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/599387f8-d6b0-3cbc-ac68-c4fb96ff20f4.roa
File:                     599387f8-d6b0-3cbc-ac68-c4fb96ff20f4.roa (raw, json)
Hash identifier:          NKsn33a2oNs9sTWWkE5+ymjVSNKcyUvTGYUoErAuVu0=
Subject key identifier:   60:A9:6C:07:A3:4B:5C:85:D2:9A:5C:18:9D:D1:C2:6D:DF:B3:1E:A0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285842B1C52BD08FA48C286BBBCB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/599387f8-d6b0-3cbc-ac68-c4fb96ff20f4.roa
Signing time:             Fri 28 Jul 2023 07:40:37 +0000
ROA not before:           Fri 28 Jul 2023 07:40:37 +0000
ROA not after:            Thu 26 Oct 2023 07:40:37 +0000
asID:                     834
IP address blocks:        45.39.198.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b1:c5:2b:d0:8f:a4:8c:28:6b:bb:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 28 07:40:37 2023 GMT
            Not After : Oct 26 07:40:37 2023 GMT
        Subject: CN=f7eb7eab-5e2b-421c-943c-5bce8a8016d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2d:ad:06:cd:96:e7:74:a6:3d:21:cd:02:4d:
                    b3:43:c0:3d:bb:1a:f9:93:f6:4d:f8:9d:18:68:24:
                    51:89:a4:5f:23:96:45:fd:34:26:53:82:f3:60:ff:
                    e1:2b:d0:fe:a9:2a:a7:a3:b7:bb:85:58:3f:82:1d:
                    63:f8:e6:24:60:d4:1e:6a:fa:17:d0:5b:00:ce:7e:
                    8f:13:62:9b:6b:b0:ec:f4:dd:84:37:a3:f3:eb:ba:
                    5e:d5:54:16:5f:b4:ae:a1:c6:f5:89:aa:e2:97:f4:
                    b6:a8:dc:d6:36:be:10:cb:80:5f:f0:d0:19:13:77:
                    ca:f6:88:69:9d:64:51:53:08:87:54:bb:02:9a:2f:
                    50:49:93:3a:05:bd:1c:83:bb:de:50:00:58:fd:21:
                    f6:5c:40:86:cb:8d:64:fe:3d:72:39:72:dc:a0:11:
                    ce:5b:7b:ba:f9:f7:79:67:e3:61:e0:c8:90:33:2e:
                    e2:39:9a:d4:48:33:4b:49:29:fb:7d:38:68:0e:76:
                    20:5c:c8:47:ac:84:8d:c0:50:c8:f1:79:bd:8d:99:
                    2e:2d:0e:67:b4:89:f4:ce:de:a2:2b:15:9c:e3:81:
                    32:86:ad:c2:4c:cd:aa:4a:f1:66:70:05:6f:e7:d5:
                    db:84:a3:5a:ab:b6:6b:a0:3c:b0:a8:64:e1:37:9b:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A9:6C:07:A3:4B:5C:85:D2:9A:5C:18:9D:D1:C2:6D:DF:B3:1E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/599387f8-d6b0-3cbc-ac68-c4fb96ff20f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:53:49:41:d7:8f:09:32:d4:54:72:e5:ef:93:1b:3d:39:34:
         da:5c:75:db:54:66:b8:97:8c:48:77:7f:cf:05:3e:91:97:98:
         b8:99:ff:7d:1e:1c:0b:53:4c:fb:4a:88:82:86:dd:e7:b5:68:
         69:1c:e3:6b:66:46:2b:b5:e3:78:1f:ab:64:50:8d:09:02:54:
         a9:18:d7:f1:40:e8:2e:1c:5d:c6:d7:b3:09:b5:04:2e:71:e1:
         d7:7c:9d:77:9f:5f:f6:15:a5:af:b2:c7:15:d5:fc:2f:e8:bd:
         b6:8d:b1:12:71:4b:f2:a3:aa:52:a9:a7:4b:26:48:03:0a:63:
         43:78:c5:40:3a:62:dd:f8:39:37:89:a5:5b:34:8a:10:9d:eb:
         9d:dd:2c:cf:71:fd:1c:c5:c2:7a:a6:d7:a5:ba:59:fe:c3:1e:
         6b:9b:9b:b7:8b:42:cf:eb:49:44:f4:70:f8:85:66:3e:52:d4:
         76:e6:9c:f7:c3:ee:49:a2:6e:20:ad:ac:4e:39:14:88:7f:48:
         b8:d3:a0:ed:85:97:9d:5f:4c:ca:e1:e5:a8:dd:4b:90:bc:9e:
         44:05:de:66:b0:95:1f:d9:27:1f:ba:64:0f:1a:34:78:80:1f:
         eb:5f:c6:00:e4:30:ad:ae:ff:4d:bf:54:b3:e1:c7:c3:ec:d6:
         7b:84:5e:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKxxSvQj6SMKGu7ywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIzMDcyODA3NDAzN1oXDTIzMTAyNjA3NDAzN1owLzEtMCsGA1UEAxMk
ZjdlYjdlYWItNWUyYi00MjFjLTk0M2MtNWJjZThhODAxNmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy2tBs2W53SmPSHNAk2zQ8A9uxr5k/ZN+J0Y
aCRRiaRfI5ZF/TQmU4LzYP/hK9D+qSqno7e7hVg/gh1j+OYkYNQeavoX0FsAzn6P
E2Kba7Ds9N2EN6Pz67pe1VQWX7Suocb1iaril/S2qNzWNr4Qy4Bf8NAZE3fK9ohp
nWRRUwiHVLsCmi9QSZM6Bb0cg7veUABY/SH2XECGy41k/j1yOXLcoBHOW3u6+fd5
Z+Nh4MiQMy7iOZrUSDNLSSn7fThoDnYgXMhHrISNwFDI8Xm9jZkuLQ5ntIn0zt6i
KxWc44Eyhq3CTM2qSvFmcAVv59XbhKNaq7ZroDywqGThN5v4YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCpbAejS1yF0ppcGJ3Rwm3fsx6gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTk5Mzg3ZjgtZDZiMC0z
Y2JjLWFjNjgtYzRmYjk2ZmYyMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSfGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFTSUHXjwky1FRy5e+TGz05NNpcddtUZriXjEh3f88FPpGXmLiZ/30e
HAtTTPtKiIKG3ee1aGkc42tmRiu143gfq2RQjQkCVKkY1/FA6C4cXcbXswm1BC5x
4dd8nXefX/YVpa+yxxXV/C/ovbaNsRJxS/KjqlKpp0smSAMKY0N4xUA6Yt34OTeJ
pVs0ihCd653dLM9x/RzFwnqm16W6Wf7DHmubm7eLQs/rSUT0cPiFZj5S1HbmnPfD
7kmibiCtrE45FIh/SLjToO2Fl51fTMrh5ajdS5C8nkQF3mawlR/ZJx+6ZA8aNHiA
H+tfxgDkMK2u/02/VLPhx8Ps1nuEXj0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:24 2024 by rpki-client on console-fra.rpki-client.org